LEGAL NOTICE, TERMS OF USE, PRIVACY POLICY AND COOKIES POLICY Last updated: June 2026

1. Legal notice and website owner In compliance with Spanish Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSI-CE), the following legal information is provided: Website: https://whitehousetarifa.myweb.smoobu.com/ Company name: El Encuentro del Semaforo, S.L. Registered address: Polígono 47, Parcela 44, Cañada de Oliveros, 11380 Tarifa, Cádiz, Spain Postal address: Apartado Postal 29, 11380 Tarifa, Cádiz, Spain Tax identification number: B11383510 Mercantile Registry of Cádiz: Volume 1088, Folio 11, Sheet CA-11948 Contact email: info@whitehouse-tarifa.com This website is operated for the promotion, information and management of accommodation and hospitality services related to White House Tarifa and other related accommodation services located in Tarifa and/or Bolonia, Cádiz, Spain.

2. Purpose of this legal page This document sets out the legal notice, terms of use, privacy policy and cookies policy applicable to this website. It informs users about the identity of the website owner, the terms governing access and use of the website, the conditions relating to accommodation information and reservations, the processing of personal data, the use of cookies and the rights available to users under applicable data protection regulations.

3. Website activity This website provides information about accommodation, availability, prices, services, house rules, booking conditions and related hospitality services. The website may allow users to: Request information Check availability Send enquiries Make or request accommodation reservations Communicate with the accommodation provider Access booking-related services Receive information before, during or after a stay The website is operated through the Smoobu platform, which provides technological services for accommodation management, booking management, website hosting, availability calendars and related services.

4. Terms of use Access to and use of this website implies acceptance of this legal notice and these terms of use. Users undertake to use the website lawfully, in good faith and in accordance with applicable law, public order and these terms. Users shall not use the website for unlawful, fraudulent, harmful or abusive purposes, or in any way that may damage the website, its systems, the accommodation provider, other users or third parties. El Encuentro del Semaforo, S.L. reserves the right to modify, update, suspend or remove any content of this website at any time and without prior notice. The user is responsible for the proper use of the website and for the accuracy of any information provided through it.

5. Intellectual and industrial property All content published on this website, including texts, images, photographs, logos, graphic elements, design, layout, structure and any other materials, is the intellectual or industrial property of El Encuentro del Semaforo, S.L. or of third parties who have authorised its use. The reproduction, distribution, public communication, transformation or any other form of exploitation of the website content without prior written authorisation is strictly prohibited, except where legally permitted. Unauthorised use of the contents of this website may give rise to legal liability.

6. Accommodation information El Encuentro del Semaforo, S.L. makes reasonable efforts to ensure that the information published on this website is accurate, complete and up to date. However, accommodation descriptions, photographs, prices, availability, services, amenities, house rules, booking conditions, cancellation policies and other information may be subject to change. The specific conditions applicable to each reservation will be those shown during the booking process and/or confirmed to the guest at the time of reservation. Users must carefully review the booking details, selected accommodation, dates, number of guests, price, cancellation policy, payment conditions, check-in and check-out times, house rules and any other relevant information before completing or confirming a reservation.

7. Reservations and booking confirmation Reservations may be made through the booking system available on this website or through direct communication with El Encuentro del Semaforo, S.L. A reservation shall only be considered confirmed once the guest has received written confirmation or booking confirmation through the platform, email or another accepted communication channel. The guest is responsible for ensuring that all information provided during the booking process is accurate, including name, contact details, dates, number of guests and any special requests. Special requests are subject to availability and are not guaranteed unless expressly confirmed in writing.

8. Prices, payments and deposits Prices are shown in euros and include applicable taxes unless otherwise stated. Payment conditions, deposits, guarantees, advance payments, remaining balances and any other payment-related requirements will be indicated during the booking process or in the booking confirmation. Where online payment is available, payments may be processed through external payment service providers. El Encuentro del Semaforo, S.L. is not responsible for technical incidents, delays, rejections, errors or security incidents attributable to third-party payment platforms, except where liability cannot be excluded under applicable law. The guest may be required to provide payment information, pay a deposit, provide a security guarantee or comply with other payment-related conditions before or during the stay.

9. Cancellation, modification and no-show Cancellation and modification conditions may vary depending on the accommodation, dates, rate, booking channel and specific conditions accepted by the guest. The applicable cancellation policy will be the one shown during the booking process and/or included in the booking confirmation. Any request to modify or cancel a reservation must be communicated in writing. Changes are subject to availability and may involve price adjustments, additional charges or loss of amounts already paid, depending on the applicable booking conditions. In the event of no-show, late arrival, early departure or failure to comply with the agreed conditions, the applicable booking and cancellation policy shall apply.

10. Check-in, check-out and guest obligations Guests must respect the check-in and check-out times, house rules, maximum occupancy, safety instructions and any other conditions communicated before or during the stay. Guests are responsible for using the accommodation, furniture, equipment, facilities and common areas with care and in accordance with their intended purpose. Guests must not carry out unlawful, dangerous, disturbing, harmful or unauthorised activities on the property. Guests are responsible for the conduct of all persons included in their reservation, including minors, companions and visitors, where permitted. El Encuentro del Semaforo, S.L. reserves the right to refuse access, terminate the stay or take appropriate measures in the event of serious breach of the house rules, unlawful conduct, damage to the property, disturbance to neighbours or other guests, false information, non-payment or any behaviour that may compromise safety, order or the proper use of the accommodation.

11. Damage, loss and liability of guests Guests may be held responsible for damage, loss, breakage, misuse or deterioration caused to the accommodation, furniture, equipment, facilities or common areas where such damage is attributable to them or to persons under their responsibility. Guests must immediately inform the accommodation provider of any incident, damage, malfunction, accident or relevant circumstance occurring during the stay. Where applicable, the cost of repairs, replacements, cleaning, extraordinary maintenance or other damage-related expenses may be charged to the guest in accordance with applicable law and the booking conditions.

12. Liability of the website owner El Encuentro del Semaforo, S.L. is not responsible for damages arising from improper use of the website, technical interruptions, temporary unavailability, security incidents caused by third parties, external service failures, errors in third-party platforms or circumstances beyond its reasonable control, except where liability cannot be excluded under applicable law. The company does not guarantee the absence of viruses, malware or other harmful elements introduced by third parties that may alter users’ computer systems, documents or files. Users are responsible for using adequate security measures when browsing the internet, submitting information or using online services.

13. External links and third-party services This website may contain links or integrations with third-party websites, booking platforms, payment service providers, maps, communication tools, social networks, tourism services or other external services. El Encuentro del Semaforo, S.L. is not responsible for the content, terms of use, privacy policies, cookies policies, security measures or practices of third-party websites or services. Users should review the legal terms, privacy policies and cookies policies of any third-party services they access through this website.

14. Privacy policy 14.1 Data controller The data controller is: El Encuentro del Semaforo, S.L. Registered address: Polígono 47, Parcela 44, Cañada de Oliveros, 11380 Tarifa, Cádiz, Spain Postal address: Apartado Postal 29, 11380 Tarifa, Cádiz, Spain Tax identification number: B11383510 Mercantile Registry of Cádiz: Volume 1088, Folio 11, Sheet CA-11948 Website: https://whitehousetarifa.myweb.smoobu.com/ Contact email: info@whitehouse-tarifa.com

14.2 Personal data that may be collected Depending on how the user interacts with the website or with El Encuentro del Semaforo, S.L., the following personal data may be collected: Name and surname Email address Telephone number Postal address, where necessary Country of residence Booking or enquiry details Arrival and departure dates Number of guests Selected accommodation Messages, comments or special requests sent by the user Payment, deposit, invoice or transaction-related information, where applicable Technical data related to website use, such as IP address, browser, device information, operating system, session data and cookies, where applicable Information required for check-in, guest registration or legal compliance Any other information voluntarily provided by the user Where required by applicable accommodation, tourism, tax, accounting, public security or administrative regulations, guests may also be asked to provide identification, registration or stay-related information necessary for compliance with legal obligations.

14.3 How personal data is collected Personal data may be collected through: Contact forms Booking or availability request forms Online booking tools Smoobu booking and management services Email communications Telephone or direct communications Payment or reservation systems, where applicable Cookies or similar technologies Technical services integrated into the website Communications before, during or after a stay Documents or information provided by guests for legal registration or administrative purposes Users must ensure that the personal data they provide is accurate, complete and up to date. If a user provides personal data relating to third parties, such as other guests, companions or family members, the user confirms that they are authorised to provide such data and that the affected persons have been informed of this privacy policy.

14.4 Purposes of data processing Personal data may be processed for the following purposes: To respond to enquiries sent by users To manage accommodation requests and reservations To confirm, modify or cancel bookings To communicate with guests before, during and after their stay To provide accommodation and hospitality services To manage check-in, check-out and guest-related administration To process payments, deposits, invoices or booking-related transactions, where applicable To issue invoices or accounting documents where necessary To comply with legal, tax, accounting, tourism, consumer protection, public security or administrative obligations To manage guest registration obligations where applicable To manage incidents, requests, complaints, claims or damage related to the stay To maintain the security and proper functioning of the website To prevent fraud, unlawful use or misuse of the website or services To protect the property, facilities, guests and legitimate interests of the company To improve the quality, security and usability of the website and services To manage cookie and privacy consent preferences To defend the rights and legitimate interests of El Encuentro del Semaforo, S.L. where necessary Personal data will not be used for profiling or automated decision-making that produces legal effects or similarly significant effects on the user.

14.5 Commercial communications El Encuentro del Semaforo, S.L. will not send commercial communications by electronic means unless the user has expressly authorised them or unless another legal basis allows such communications under applicable law. If newsletters, promotional communications, loyalty communications or marketing campaigns are introduced in the future, users will be informed in advance and, where required, their express consent will be requested. Users may withdraw their consent to receive commercial communications at any time.

14.6 Legal basis for processing personal data The legal basis for processing personal data may vary depending on the purpose of the processing. The legal bases may include: The user’s consent, for example when submitting a contact form, accepting non-essential cookies or requesting certain communications. The performance of a contract or the application of pre-contractual measures, for example when managing booking requests, reservations, guest communications, accommodation services, payments or cancellations. Compliance with legal obligations, for example tax, accounting, tourism, public security, consumer protection or administrative obligations applicable to accommodation providers. The legitimate interest of El Encuentro del Semaforo, S.L., for example to manage communications, protect the website, prevent fraud, handle claims, manage incidents, protect the property, improve services, defend legal interests and ensure the proper operation of the website, provided that such interests do not override the rights and freedoms of the user.

14.7 Is providing personal data obligatory? Providing personal data through the website is generally voluntary. However, certain data may be necessary in order to respond to an enquiry, process a reservation, provide accommodation services, manage payments, issue invoices, comply with guest registration obligations or meet other legal requirements. If the user does not provide the necessary information, El Encuentro del Semaforo, S.L. may be unable to respond to the enquiry, complete the reservation, provide the requested service or comply with applicable legal obligations.

14.8 Data retention Personal data will be kept only for as long as necessary to fulfil the purposes for which it was collected. In particular: Data related to enquiries will be kept for the time necessary to respond and manage the communication. Data related to reservations and accommodation services will be kept for the duration of the contractual relationship and afterwards for the legally required periods. Data related to invoices, payments, tax or accounting obligations will be kept for the periods required by applicable law. Data required for public security, tourism or guest registration obligations will be kept for the legally established periods. Data related to claims, incidents, damage or responsibilities may be retained for the period necessary to manage or defend against possible legal actions. Data processed on the basis of consent will be kept until the user withdraws consent, unless there is another legal basis for retaining it. When personal data is no longer necessary, it will be deleted, blocked or anonymised in accordance with applicable law.

14.9 Recipients of personal data Personal data will not be sold to third parties. Personal data may be accessed or processed by third-party service providers where necessary for the operation of the website, management of reservations, provision of accommodation services or compliance with legal obligations. These providers may include: Website hosting and maintenance providers Smoobu GmbH and related Smoobu services Booking or reservation management tools Payment service providers, where applicable Email and communication service providers IT support providers Accounting, tax, legal or administrative advisers Public authorities, courts, law enforcement bodies, tax authorities or other competent bodies where legally required Insurance providers, where applicable Other providers necessary for the proper provision of the requested services Third-party providers that process personal data on behalf of El Encuentro del Semaforo, S.L. must process such data in accordance with applicable data protection regulations and, where required, under appropriate data processing agreements.

14.10 Smoobu platform This website is hosted and/or operated through the Smoobu platform. Smoobu may process certain personal data on behalf of El Encuentro del Semaforo, S.L. as a technology, booking management, accommodation management, website and hosting service provider. Smoobu may process technical, booking, communication and guest-related data necessary for the operation, security, availability, management and maintenance of the website and booking tools, including data related to visitors, devices, sessions, forms, availability searches, reservations and website interactions. The use of Smoobu services may involve processing by Smoobu GmbH, its affiliated entities, subcontractors or service providers located in different jurisdictions. Users may consult Smoobu’s own privacy and data protection information on its official website.

14.11 International data transfers Some service providers used for website hosting, technical infrastructure, communications, booking management, payment processing, analytics, security or support may process personal data outside the European Economic Area. Where international data transfers occur, they will be carried out in accordance with the GDPR and protected by appropriate safeguards, such as: Adequacy decisions adopted by the European Commission Standard Contractual Clauses approved by the European Commission Additional technical, organisational or contractual safeguards Any other lawful transfer mechanism recognised under applicable data protection regulations

14.12 Security measures El Encuentro del Semaforo, S.L. adopts appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, loss, disclosure or destruction. These measures are applied taking into account the nature of the data, the risks involved, the state of technology and the services used. However, users should be aware that no online system can guarantee absolute security. Users are responsible for using secure devices, networks and passwords when interacting with the website or online services.

14.13 Data of minors The services offered through this website are not specifically directed at minors. Minors should not provide personal data through this website without the consent of their parents, guardians or legal representatives where such consent is required by applicable law. If El Encuentro del Semaforo, S.L. becomes aware that personal data of a minor has been collected without the required authorisation, appropriate measures will be taken to delete or restrict such data where necessary.

14.14 User rights Under the GDPR and the LOPDGDD, users may exercise the following rights: Right of access: to know whether their personal data is being processed and to obtain information about such processing. Right of rectification: to request the correction of inaccurate or incomplete personal data. Right of erasure: to request the deletion of personal data where legally applicable. Right to restriction of processing: to request that the processing of personal data be limited in certain circumstances. Right to object: to object to the processing of personal data in certain circumstances. Right to data portability: to receive personal data in a structured, commonly used and machine-readable format, where legally applicable. Right to withdraw consent: to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal. Right not to be subject to automated individual decision-making, including profiling, where applicable. To exercise these rights, users may contact: info@whitehouse-tarifa.com The request should clearly indicate the right being exercised and include sufficient information to identify the user. Where necessary, El Encuentro del Semaforo, S.L. may request additional information to verify the identity of the person making the request.

14.15 Right to lodge a complaint Users have the right to lodge a complaint with the Spanish Data Protection Authority, the Agencia Española de Protección de Datos, if they consider that the processing of their personal data does not comply with applicable data protection regulations. Official website: www.aepd.es 14.16 Accuracy of personal data Users are responsible for ensuring that the personal data they provide is accurate, complete and up to date. El Encuentro del Semaforo, S.L. shall not be responsible for inaccurate or outdated information provided by users.

15. Cookies policy 15.1 What are cookies? Cookies are small text files stored on the user’s device when visiting a website. They are widely used to make websites function correctly, improve user experience, remember preferences and provide information to the website owner or service providers.

15.2 What cookies may this website use? This website may use cookies and similar technologies necessary for the correct functioning, security and management of the website. As the website is operated through the Smoobu platform, some cookies may be installed by Smoobu or by technical service providers connected to the website, booking engine, availability calendar, payment tools, accommodation management system or other integrated services. The website may also use analytical or preference cookies where the user has given consent through the cookie banner, where such cookies are active. Advertising or behavioural profiling cookies will not be used unless expressly indicated and subject to the user’s prior consent where required.

15.3 Types of cookies Technical cookies These cookies are essential for the website to function correctly. They may be used for security, session management, booking forms, availability searches, language settings, consent management and basic website operation. Technical cookies do not require prior consent. Analytical cookies These cookies are used to understand how visitors interact with the website, usually in aggregated or statistical form. Analytical cookies are only installed after the user has given consent through the cookie banner, unless they fall within a legally recognised exemption. Preference cookies These cookies may remember user choices, such as language, region or display preferences, where applicable. Third-party cookies Some cookies may be set by third-party providers used for the operation of the website, booking system, payment management, maps, embedded content, analytics or other technical services. These third parties may process data in accordance with their own privacy and cookies policies.

15.4 Consent for non-essential cookies Non-essential cookies will only be installed after obtaining the user’s consent through the cookie banner displayed on the website, where such cookies are active. Users may accept, reject or configure non-essential cookies. They may also withdraw their consent at any time by adjusting their cookie preferences, where available, or by changing their browser settings.

15.5 How can users manage cookies? Users can configure their browser to block, delete or restrict cookies at any time. Please note that disabling technical cookies may affect the proper functioning of the website, including the booking system, forms, availability calendar, payment tools or other essential services. 16. Applicable law and jurisdiction This legal notice, terms of use, privacy policy and cookies policy are governed by Spanish law. In the event of any dispute, the parties shall submit to the courts and tribunals legally competent under applicable consumer and procedural regulations. 17. Updates to this legal page El Encuentro del Semaforo, S.L. may update this legal notice, terms of use, privacy policy and cookies policy periodically to reflect changes in legislation, company details, services, technical providers, booking systems, data processing activities or website operation. Users are advised to review this page from time to time. If significant changes are made to the processing of personal data, users will be informed where required by applicable law.